Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File:                     qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier:          DrLOIsD9sgiQK8tCYae9/kcEyB0w4SN9IueiGEtHm14=
Subject key identifier:   11:32:6F:7C:F1:B5:AD:F4:7E:5D:F8:7D:C5:F2:E1:32:AD:F4:78:59
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer:       /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial:       019ED4CFD2A71BE5BD995B47F5E4C699E7C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number:          06D0
Signing time:             Wed 17 Jun 2026 09:00:50 +0000
Manifest this update:     Wed 17 Jun 2026 09:00:50 +0000
Manifest next update:     Thu 18 Jun 2026 09:00:50 +0000
Files and hashes:         1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
                          2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: 4tLECiAm2hr+w+Fz5C+OGMieKKjSMEBSe3TGnKBKm7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:cf:d2:a7:1b:e5:bd:99:5b:47:f5:e4:c6:99:e7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
        Validity
            Not Before: Jun 17 09:00:50 2026 GMT
            Not After : Jun 18 09:00:50 2026 GMT
        Subject: CN=11326f7cf1b5adf47e5df87dc5f2e132adf47859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:d1:74:39:af:b0:d6:1f:93:3d:46:e0:84:
                    46:fb:44:ef:fb:3c:7a:ac:f0:b3:eb:b3:fe:d1:7b:
                    4c:95:d4:8a:5b:1e:d0:2c:50:7a:67:55:97:45:b5:
                    4c:e3:03:07:3e:89:bd:ae:06:fe:21:47:db:45:08:
                    80:3c:20:0d:af:73:33:17:eb:a2:85:18:28:f9:27:
                    2a:db:86:e7:06:dc:14:e4:f3:3f:f3:69:8b:f8:6e:
                    0b:68:94:a8:67:3e:79:a9:0c:f9:2e:60:d0:3b:9f:
                    77:1b:81:69:7b:2c:1f:8e:f1:63:73:05:68:eb:d1:
                    71:44:98:4b:54:c3:8d:50:82:fb:44:5a:48:36:2c:
                    32:61:61:f0:c3:f5:54:98:bf:76:30:ec:a1:52:67:
                    c7:19:97:8f:55:0b:1d:f3:52:a4:b2:b6:46:7c:da:
                    01:df:53:09:95:6b:77:ad:c9:67:48:6e:85:90:29:
                    c7:b7:4a:10:a3:47:ab:5a:6c:94:01:57:6f:e5:11:
                    0b:b9:4b:e5:38:34:ec:17:df:63:2e:5b:cb:07:07:
                    a5:9e:4d:4f:8c:5c:32:bc:f4:cb:5b:74:39:77:8a:
                    b1:81:f5:ac:a1:c3:64:9d:bb:c7:f0:6d:d5:22:fd:
                    c2:85:2f:68:a3:f8:5d:6c:f2:75:04:c6:7b:4f:97:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:32:6F:7C:F1:B5:AD:F4:7E:5D:F8:7D:C5:F2:E1:32:AD:F4:78:59
            X509v3 Authority Key Identifier:
                keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:03:ff:03:c6:78:f2:4b:0d:a6:2c:9f:cb:5a:04:2c:c3:
         c8:e1:19:31:8d:6f:45:83:63:c0:d1:5a:1b:85:85:0b:17:aa:
         3e:b1:91:a0:7d:28:3f:b3:a0:d3:b2:5e:73:00:4c:e1:08:7e:
         d6:00:1b:fa:da:42:a8:02:56:f6:ed:be:a2:9b:bb:19:e4:04:
         ee:59:e6:fc:da:b3:9e:f3:3f:25:73:6b:0b:4d:bb:64:c4:21:
         98:a3:69:b8:26:4e:e6:cf:19:d0:22:c6:39:15:5b:8d:d5:d8:
         ce:04:8b:8d:92:07:ad:aa:41:78:7d:d8:f7:00:6a:36:5a:a1:
         1c:bf:8b:92:8a:fc:dc:9a:7d:d3:d3:c2:38:08:31:ea:82:94:
         40:e3:a1:79:03:4c:2c:a1:02:d8:85:c0:0b:0e:1b:22:f0:69:
         8b:8e:03:79:98:7c:96:5b:dc:cf:ca:8b:ce:a7:e5:ee:1a:dd:
         69:55:dc:02:40:87:ab:b5:dc:0b:f0:fc:f1:e4:86:7a:be:de:
         de:f5:9a:27:71:85:53:1c:9f:a8:dc:ef:d7:5b:f9:bc:f6:81:
         67:5b:b6:db:21:82:37:e3:84:f6:60:33:6d:7f:ed:3d:9c:45:
         ad:52:03:d8:17:89:aa:30:e5:2b:17:28:3d:ab:e3:3a:72:a7:
         42:f2:45:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Uz9KnG+W9mVtH9eTGmefEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk
NjRmZTQwHhcNMjYwNjE3MDkwMDUwWhcNMjYwNjE4MDkwMDUwWjAzMTEwLwYDVQQD
EygxMTMyNmY3Y2YxYjVhZGY0N2U1ZGY4N2RjNWYyZTEzMmFkZjQ3ODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5HRdDmvsNYfkz1G4IRG+0Tv+zx6
rPCz67P+0XtMldSKWx7QLFB6Z1WXRbVM4wMHPom9rgb+IUfbRQiAPCANr3MzF+ui
hRgo+Scq24bnBtwU5PM/82mL+G4LaJSoZz55qQz5LmDQO593G4FpeywfjvFjcwVo
69FxRJhLVMONUIL7RFpINiwyYWHww/VUmL92MOyhUmfHGZePVQsd81KksrZGfNoB
31MJlWt3rclnSG6FkCnHt0oQo0erWmyUAVdv5RELuUvlODTsF99jLlvLBwelnk1P
jFwyvPTLW3Q5d4qxgfWsocNknbvH8G3VIv3ChS9oo/hdbPJ1BMZ7T5fO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEyb3zxta30fl34fcXy4TKt9HhZMB8GA1UdIwQY
MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt
NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz
LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfYD/wPG
ePJLDaYsn8taBCzDyOEZMY1vRYNjwNFaG4WFCxeqPrGRoH0oP7Og07JecwBM4Qh+
1gAb+tpCqAJW9u2+opu7GeQE7lnm/NqznvM/JXNrC027ZMQhmKNpuCZO5s8Z0CLG
ORVbjdXYzgSLjZIHrapBeH3Y9wBqNlqhHL+Lkor83Jp909PCOAgx6oKUQOOheQNM
LKEC2IXACw4bIvBpi44DeZh8llvcz8qLzqfl7hrdaVXcAkCHq7XcC/D88eSGer7e
3vWaJ3GFUxyfqNzv11v5vPaBZ1u22yGCN+OE9mAzbX/tPZxFrVID2BeJqjDlKxco
PavjOnKnQvJFtw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:20 2026 by rpki-client